$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa File: 29bb7170-7a90-39aa-ad83-71606197544b.roa (raw, json) Hash identifier: K6qPeP/s3JLOGmCpujC3JG1xPrZpei73ZSTUjd10/g0= Subject key identifier: 5A:4C:E8:82:40:3A:D3:74:4B:62:38:63:73:4F:8F:28:74:F3:97:6D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84119E94073B4E1925B55C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:9e:94:07:3b:4e:19:25:b5:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1a580e1e-1558-4849-a87d-fa2a37286ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:46:1b:65:3f:c1:d0:08:ff:d3:87:74:d6:cc: 23:73:17:ec:1f:b6:21:34:7f:c5:30:74:82:ea:68: e5:9e:ef:c9:13:9d:e7:6d:6e:10:b9:35:39:38:07: 0e:1e:d2:a5:65:10:54:9f:81:02:94:59:64:c2:11: 18:e5:f1:35:eb:33:17:3a:4b:61:a8:c2:f4:00:11: 19:e4:b8:1d:cf:6b:98:2c:d8:bd:e8:2a:11:a9:1c: ed:ea:05:bc:a1:a6:ce:d9:db:ba:1d:62:79:f8:15: b5:50:0b:ed:93:e2:74:f3:13:0b:46:33:5a:bb:42: 6b:5e:d8:dd:75:7d:6b:de:79:98:c4:fc:44:75:2e: 76:47:31:82:be:64:d8:50:e9:2d:08:2f:44:6f:23: f8:f4:d4:95:aa:24:a4:59:5b:cc:91:1c:2c:8c:b3: 8c:58:09:04:ee:2d:18:16:38:1b:00:a0:61:19:5a: 37:9a:b7:2d:6c:a2:cb:a6:6d:a0:f8:ac:36:e8:23: f4:62:92:40:1a:e6:75:0a:bf:0c:b8:57:df:27:35: a1:31:5d:43:28:ce:91:46:d4:d3:05:b4:20:5c:a5: ed:01:fb:cd:50:c0:ff:c9:1a:02:3c:6f:00:93:03: 3d:98:52:78:57:9b:71:18:dd:b4:61:55:07:e0:ff: 42:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4C:E8:82:40:3A:D3:74:4B:62:38:63:73:4F:8F:28:74:F3:97:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:aa:d2:39:34:6c:31:7b:61:56:e5:39:42:bd:52:3b:ac:6e: 1f:5b:e1:31:22:79:5b:34:c5:92:4a:25:c8:68:1b:7f:96:7f: 82:f0:43:c9:76:5b:4b:dc:b0:a5:4c:df:b6:29:bb:0b:0d:9a: 79:41:7c:e7:87:af:1b:8b:dd:19:ec:86:d3:56:46:98:9b:f5: 17:48:46:b5:bf:9f:27:04:4b:5f:f5:96:99:1b:a0:4f:6f:05: ae:2e:51:b6:31:c8:b8:ff:60:81:c4:8a:dd:cf:f1:6d:68:d7: ea:46:87:13:a1:9f:9b:40:82:24:64:1a:a6:03:25:e5:d1:45: bc:0c:bb:31:cf:ae:47:f6:ee:51:f5:09:a7:57:2e:a6:9e:6a: d5:b7:7c:2f:c6:9c:2e:3f:65:50:d5:0e:5b:04:e8:66:46:7f: 43:1a:fd:d3:7d:69:21:72:e8:ef:49:20:1c:43:11:27:29:9c: db:b4:45:2d:d9:4b:10:6a:ce:7d:dc:68:6c:b7:06:4b:28:e3: fd:74:c7:d7:02:40:dd:3d:62:ea:03:8b:cf:78:f8:cf:9b:21: 25:ea:e1:4f:77:4a:8b:10:fb:5a:a2:9b:81:e2:b4:8b:77:9f: d1:37:2d:fa:3d:7a:69:d6:9b:60:c1:99:c4:25:02:ce:b2:e2: 34:94:41:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZ6UBztOGSW1XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWE1ODBlMWUtMTU1OC00ODQ5LWE4N2QtZmEyYTM3Mjg2ZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEYbZT/B0Aj/04d01swjcxfsH7YhNH/FMHSC 6mjlnu/JE53nbW4QuTU5OAcOHtKlZRBUn4EClFlkwhEY5fE16zMXOkthqML0ABEZ 5Lgdz2uYLNi96CoRqRzt6gW8oabO2du6HWJ5+BW1UAvtk+J08xMLRjNau0JrXtjd dX1r3nmYxPxEdS52RzGCvmTYUOktCC9EbyP49NSVqiSkWVvMkRwsjLOMWAkE7i0Y FjgbAKBhGVo3mrctbKLLpm2g+Kw26CP0YpJAGuZ1Cr8MuFffJzWhMV1DKM6RRtTT BbQgXKXtAfvNUMD/yRoCPG8AkwM9mFJ4V5txGN20YVUH4P9C5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpM6IJAOtN0S2I4Y3NPjyh085dtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjliYjcxNzAtN2E5MC0z OWFhLWFkODMtNzE2MDYxOTc1NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaq0jk0bDF7YVblOUK9Ujusbh9b4TEieVs0xZJKJchoG3+Wf4LwQ8l2 W0vcsKVM37YpuwsNmnlBfOeHrxuL3RnshtNWRpib9RdIRrW/nycES1/1lpkboE9v Ba4uUbYxyLj/YIHEit3P8W1o1+pGhxOhn5tAgiRkGqYDJeXRRbwMuzHPrkf27lH1 CadXLqaeatW3fC/GnC4/ZVDVDlsE6GZGf0Ma/dN9aSFy6O9JIBxDEScpnNu0RS3Z SxBqzn3caGy3Bkso4/10x9cCQN09YuoDi894+M+bISXq4U93SosQ+1qim4HitIt3 n9E3Lfo9emnWm2DBmcQlAs6y4jSUQUM= -----END CERTIFICATE-----Generated at Sat Jul 26 11:52:08 2025 by rpki-client